$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft File: J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json) Hash identifier: ZiO4OPMuWFfJsyXLxfjKuz5C9OTy6JqiKoYQ3/6HPpE= Subject key identifier: 1C:A3:8A:F3:91:5A:9D:EE:4C:CF:A4:B1:F2:91:C6:89:96:F7:33:83 Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 Certificate issuer: /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Certificate serial: 0AFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft Manifest number: 0AEE Signing time: Thu 26 Mar 2026 19:17:50 +0000 Manifest this update: Thu 26 Mar 2026 19:17:50 +0000 Manifest next update: Thu 02 Apr 2026 19:17:50 +0000 Files and hashes: 1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: 6b+dSBcZPbz6curHvd8NAALVK4yj8n0ioMkrOtmkthw=) 2: F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (hash: CCWU/slr79ct4FNV5i0TIXfHecnrZ2GwArH1P9tumgo=) 3: 8AAEC8AEE48D11EF98A3562BC4F9AE02.roa (hash: Ela4JYI8D8rs4ZlHfvA7O7Ltq8JCZsgjs+g9KLkdTMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2815 (0xaff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Validity Not Before: Mar 26 19:17:50 2026 GMT Not After : Apr 2 19:17:50 2026 GMT Subject: CN=69c5865e-d28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:c9:b2:c6:63:bf:a3:86:81:8e:49:54:60: 5c:e6:b9:78:70:6f:3e:77:6b:f0:db:d9:02:4a:03: eb:e2:83:29:60:5c:5f:3b:cc:b8:48:2f:4d:e0:e0: 34:ad:c5:78:a7:50:2a:3d:6a:0a:e0:d9:3e:a3:10: d8:3b:52:f1:f3:5a:14:bb:d5:75:9f:a5:7a:b1:b5: 3e:8b:21:19:fa:4a:14:25:66:26:d4:47:fc:8b:ea: 8a:59:80:ca:0b:60:7b:0b:ab:75:58:06:5a:29:6a: a9:a1:a5:7c:f3:c5:e6:a5:e9:5b:6b:17:e8:ed:c4: fd:81:38:ab:42:81:d9:52:fe:8d:a6:91:07:cb:af: 68:49:a0:56:e8:a5:10:60:2d:bd:8f:c2:01:25:eb: 94:d6:13:e0:53:48:4e:da:8c:1c:1b:1b:37:64:8b: 1e:ab:c2:0c:fd:53:c4:5c:ef:37:83:f0:78:3a:26: ff:f3:8e:1e:1a:df:31:d4:e3:e1:cf:34:f0:eb:de: f5:5a:6e:a8:16:33:81:8e:40:e2:2e:77:00:fb:6a: e4:4b:c0:c1:7e:d0:d5:c2:82:d4:63:e4:3e:97:e5: a6:71:5e:af:41:7c:ff:e3:e7:a6:fa:22:e2:c8:96: 02:1c:e3:bc:16:2d:f9:f4:df:ba:8d:79:d3:47:30: 6f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A3:8A:F3:91:5A:9D:EE:4C:CF:A4:B1:F2:91:C6:89:96:F7:33:83 X509v3 Authority Key Identifier: keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:52:32:ea:f7:cc:c0:50:00:27:f5:4a:e6:66:03:c8:de:f2: 19:b6:0c:10:07:a3:bd:a8:da:a1:75:02:7c:d7:1e:8b:11:6e: 14:f3:8c:9a:f1:79:23:cc:4e:a1:30:9c:fd:69:02:54:27:74: 4a:0c:b8:d1:60:95:74:6b:70:7a:3d:76:1d:95:6e:f8:61:de: d5:70:c5:41:ec:78:73:05:0c:56:28:d5:53:33:56:68:f2:da: af:63:d6:af:c6:64:96:08:e0:05:d9:57:6b:f1:a2:86:b5:70: 6c:e2:28:22:81:fd:be:7e:56:a6:e9:0f:e0:6a:a8:a8:ae:0b: b5:76:08:d7:4b:44:cb:78:b8:ec:62:70:b9:0a:a6:0c:45:21: 3f:22:31:c2:cb:72:6d:50:ec:5e:6e:1b:96:5c:e9:6c:26:01: e9:16:61:3b:86:61:69:8d:3b:54:d6:e4:b1:9c:b0:5e:a8:49: b7:0a:3a:7c:63:e4:e8:7f:58:37:77:7c:79:f8:94:93:39:7b: 9c:dd:cc:7a:87:fe:75:ce:cb:0f:88:61:f3:43:3c:83:91:0f: 13:04:24:aa:f6:74:90:3b:41:7b:22:f4:b4:22:d5:13:b0:1c: 88:e2:5c:69:b7:d1:fb:a6:a3:5c:43:1d:16:0a:e0:90:31:36: 61:7a:ac:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBCRUMxMTAvBgNVBAUTKDI3N0Y2ODYyNjg0MDcyQjYyQTE1NkRERjc1REQ3NzI1 QzM4RjUxRDAwHhcNMjYwMzI2MTkxNzUwWhcNMjYwNDAyMTkxNzUwWjAYMRYwFAYD VQQDEw02OWM1ODY1ZS1kMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTHJssZjv6OGgY5JVGBc5rl4cG8+d2vw29kCSgPr4oMpYFxfO8y4SC9N4OA0 rcV4p1AqPWoK4Nk+oxDYO1Lx81oUu9V1n6V6sbU+iyEZ+koUJWYm1Ef8i+qKWYDK C2B7C6t1WAZaKWqpoaV888Xmpelbaxfo7cT9gTirQoHZUv6NppEHy69oSaBW6KUQ YC29j8IBJeuU1hPgU0hO2owcGxs3ZIseq8IM/VPEXO83g/B4Oib/844eGt8x1OPh zzTw6971Wm6oFjOBjkDiLncA+2rkS8DBftDVwoLUY+Q+l+WmcV6vQXz/4+em+iLi yJYCHOO8Fi359N+6jXnTRzBvpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFByjivOR Wp3uTM+ksfKRxomW9zODMB8GA1UdIwQYMBaAFCd/aGJoQHK2KhVt33XddyXDj1HQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEJFQy83QjdGMjhFMjY3 N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNyWXFGVzNmZGQxM0pjT1BV ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozOW9ZbWhBY3JZcUZXM2ZkZDEzSmNPUFVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEJFQy83QjdGMjhFMjY3N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNy WXFGVzNmZGQxM0pjT1BVZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnFIy6vfMwFAAJ/VK5mYDyN7yGbYMEAejvajaoXUCfNceixFuFPOMmvF5I8xO oTCc/WkCVCd0Sgy40WCVdGtwej12HZVu+GHe1XDFQex4cwUMVijVUzNWaPLar2PW r8ZklgjgBdlXa/GihrVwbOIoIoH9vn5WpukP4GqoqK4LtXYI10tEy3i47GJwuQqm DEUhPyIxwstybVDsXm4bllzpbCYB6RZhO4ZhaY07VNbksZywXqhJtwo6fGPk6H9Y N3d8efiUkzl7nN3Meof+dc7LD4hh80M8g5EPEwQkqvZ0kDtBeyL0tCLVE7AciOJc abfR+6ajXEMdFgrgkDE2YXqs0Q== -----END CERTIFICATE-----Generated at Fri Mar 27 06:41:29 2026 by rpki-client